CVE-2020-3259highunder attackransomwareCWE-200

CVE-2020-3259: high-severity vulnerability in Cisco Adaptive Security Appliance (ASA) Software

Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Information Disclosure Vulnerability

Published · Updated

Follow this CVE+ Monitor Cisco Adaptive Security Appliance+ Monitor Cisco Firepower Threat Defense

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

73Vexday Risk Score

Prioritize patching. It under exploitation confirmed by CISA.

ssvc Actcvss 7.5epss 72%
from disclosure to weapon
Published on NVDMay 6
CISA KEV+1380d
Action required by CISAfederal deadline: 2024-03-07

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

In short

A flaw in Cisco ASA and FTD firewalls' web interface allows attackers to read sensitive information from device memory by sending specially crafted web requests, without needing to log in. This could expose passwords, encryption keys, and other confidential data.

Technical detail

A buffer tracking vulnerability in the web services parser of Cisco ASA and FTD allows an unauthenticated remote attacker to retrieve arbitrary memory contents via malformed GET requests to the web interface. The flaw stems from improper handling of invalid URLs, potentially leading to disclosure of sensitive credentials and cryptographic material. Exploitation requires network access to the web services interface and affects specific AnyConnect and WebVPN configurations.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to retrieve memory contents on an affected device, which could lead to the disclosure of confidential information. The vulnerability is due to a buffer tracking issue when the software parses invalid URLs that are requested from the web services interface. An attacker could exploit this vulnerability by sending a crafted GET request to the web services interface. A successful exploit could allow the attacker to retrieve memory contents, which could lead to the disclosure of confidential information. Note: This vulnerability affects only specific AnyConnect and WebVPN configurations. For more information, see the Vulnerable Products section.
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected products
Cisco · Cisco Adaptive Security Appliance (ASA) Software
Related CVEs — Cisco Adaptive Security Appliance (ASA) Software

In the same product, most dangerous first.

CVE-2020-3452HIGHCisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Read-Only Path Traversal VulnerabilityEPSS 100.0%KEVCVE-2020-3580MEDIUMCisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Interface Cross-Site Scripting VulnerabilitiesEPSS 85.6%KEVCVE-2024-20353HIGHCVE-2024-20353EPSS 69.8%KEVCVE-2023-20269MEDIUMCVE-2023-20269EPSS 26.6%KEVCVE-2024-20359MEDIUMCVE-2024-20359EPSS 18.8%KEVCVE-2024-20481MEDIUMCVE-2024-20481EPSS 15.9%KEV